NSE 4 – FortiGate Administrator 7.6 — Question 27

A new administrator is configuring FSSO authentication on FortiGate using DC Agent Mode.
Which step is not part of the expected process?

Answer options

• A. The user logs into the windows domain.
• B. FortiGate determines user identity based on the IP address in the FSSO list.
• C. The DC agent sends login event data directly to FortiGate.
• D. The collector agent forwards login event data to FortiGate.

Correct answer: C

Explanation

Option C is incorrect because, in DC Agent Mode, the DC agent does not send login event data directly to FortiGate; instead, it is the collector agent that performs this function. The other options correctly describe steps involved in the FSSO authentication process.